SEC News

What's new arround internet

Last one

Src	Date (GMT)	Titre	Description	Tags	Stories	Notes
	2019-04-16 15:00:00	Electrum Bitcoin wallets under siege (lien direct)	Threat actors are relentlessly phishing and attacking Electrum Bitcoin wallet users, racking up millions of dollars. Categories: Cybercrime Social engineering Tags: bitcoin bitcoins botnet ddos Electrum exploit kit exploits RIG RIG EK vulnerabilities wallet (Read more...)
	2019-04-15 16:14:04	Ellen DeGeneres giveaway scam spreading on social media (lien direct)	Scammers take aim at fans of Ellen DeGeneres with a bizarre chain of giveaways and free movie websites. Will anyone take the bait? Categories: Cybercrime Social engineering Tags: degeneres ellen facebook scam social media (Read more...)
	2019-04-15 14:42:02	(Déjà vu) A week in security (April 8 – 14) (lien direct)	A roundup of news stories from April 8–4, including Baldr, medical management apps, an Android password stealer, and new sextortion scams. Categories: Security world Week in security Tags: alexa amazon Baldr china facebook fake news Instagram personal information security sextortion scams vpn week (Read more...)
	2019-04-12 17:40:05	Fake Instagram assistance apps found on Google Play are stealing passwords (lien direct)	We all want those Instagram likes and followers. But what if the app that's supposed to be assisting you is also stealing your username and password? As a matter of fact, that's exactly what we found in three fake Instagram assistance apps found on Google Play. Categories: Cybercrime Mobile Tags: android malware FakeInsta Google Play Instagram Mobile (Read more...)
	2019-04-11 17:03:00	What is personal information? In legal terms, it depends (lien direct)	What exactly is the "personal information" that companies need to legally protect? Learn which data points organizations need to secure, from Social Security numbers to olfactory, smell-based data (!), to comply with the law. Categories: Privacy Security world Tags: California Consumer Privacy Act cybersecurity law data breach notification data breach notification law data privacy legislation data protection law European Union gdpr General Data Protection Regulation online privacy personal data personal information personally identifiable information RSA Conference (Read more...)
	2019-04-10 15:00:00	Who is managing the security of medical management apps? (lien direct)	Because medical records are such a lucrative data set, attackers often target the healthcare industry, seeking out and eventually finding the weakest link in the supply chain. That's why it's important for stakeholders to consider the broader implications of cybersecurity weaknesses in medical management apps. But who should be held responsible? Categories: 101 Business Tags: Data privacy health apps healthcare HIPPA medical apps medical management apps vulnerabilities (Read more...)
	2019-04-09 15:00:01	Say hello to Baldr, a new stealer on the market (lien direct)	Baldr is a new stealer that is being actively developed and distributed. Will it be able to compete in this crowded arena? Categories: Criminals Threat analysis Tags: Baldr information stealer spyware stealer stealer functionality threat analysis unpacking code (Read more...)
	2019-04-08 15:52:04	(Déjà vu) A week in security (April 1 – 7) (lien direct)	A roundup of cybersecurity news from April 1–7, including global data privacy laws, water plant cybersecurity, and the mysterious story of a 23-year-old woman's visit to the Mar-a-Lago resort in Florida. Categories: Malwarebytes news Tags: bayer chinese cyberattacks chinese cyberthreats critical infrastructure facebook mar-a-lago passwords social media week in security (Read more...)
	2019-04-03 15:43:05	Was this really an attempt by the Chinese? (lien direct)	What happened at Mar-a-Lago and can we attribute this possible attempt to get close to the president of the US to China? Categories: Cybercrime Malware (Read more...)
	2019-04-03 15:00:00	How gamers can protect against increasing cyberthreats (lien direct)	We take a look at the various cyberthreats video gamers may encounter online, their real-world consequences, and what users can do to protect themselves. Categories: 101 FYI Tags: account takeover ad flooding ATO briefing cyberbullying cybersecurity grooming malvertising malware in games online gaming phishing PUP in games responsible digital citizen risks to online gamers security 101 stalking survey scams swatting trolling video games (Read more...)
	2019-04-02 15:00:00	The global data privacy roadmap: a question of risk (lien direct)	For any American company taking steps outside the US market, global data privacy compliance is a question of risk versus reward. Categories: Privacy Tags: Africa amazon Argentina asia Bahrain Brazil china CNIL Data privacy data privacy laws data protection authority Europe European Union gdpr General Data Protection Regulation global data privacy Google microsoft Middle East National Data Protection Commission Personal Information Protection Act Qatar singapore South Korea whitelist (Read more...)
	2019-04-01 15:00:00	Compromising vital infrastructure: water management (lien direct)	Water management is an essential part of our infrastructure. Loss of it can lead to service outages, diseases, and famine. So the cybersecurity should be top notch. Categories: Business Security world Tags: awwa byod city of atlanta crashoverride emotet insider threats ransomware scada stuxnet vital infrastructure water management water plants (Read more...)	Guideline
	2019-04-01 08:24:01	A week in security (March 25 – 31) (lien direct)	A roundup of news stories from March 25 - 31, including phishing, hacking, Government studies, mobile dangers on official stores and more. Categories: Security world Week in security Tags: adware hacking malware Mobile phishing roundup week in security (Read more...)
	2019-03-29 15:00:00	Awakening the beast: BatMobi adware (lien direct)	BatMobi is an Advertisement Software Developer Kit (Ad SDK) that was once clean and safe to use, but suddenly began serving adware in January. Learn more about this elusive threat, including how to clean it off pre-installed apps on mobile devices. Categories: Cybercrime Mobile Tags: adware Android BatMobi Mobile mobile adware website redirects (Read more...)
	2019-03-28 15:00:00	US Congress proposes comprehensive federal data privacy legislation-finally (lien direct)	The United States might be the only country of its size to lack a comprehensive data privacy law protecting its citizens' online lives. That could change this year. Categories: Privacy Tags: Amy Klobuchar Brian Schatz California Consumer Privacy Act CDT Center for Democracy and Technology comprehensive data privacy law comprehensive data privacy legislation Consumer Data Protection Act data broker Data Care Act Data Dissemination Act Data privacy data privacy law data privacy laws data privacy legislation federal legislation gdpr General Data Protection Regulation Klobuchar Marco Rubio privacy Ron Wyden Rubio Schatz Senator statewide legislation Wyden (Read more...)
	2019-03-27 16:00:00	Location data leaks from family tracking app database (lien direct)	An app called Family Locator exposed the personal information and locations of 280,000 users in real time, including children. How did this happen? And how can app developers avoid it in the future? Categories: Cybercrime Privacy Tags: database exposed family location MongoDB (Read more...)
	2019-03-27 15:00:00	Facebook\'s plain text misstep, and other password sins (lien direct)	Read more...)
	2019-03-26 15:00:00	Plugin vulnerabilities exploited in traffic monetization schemes (lien direct)	The latest round of vulnerable WordPress plugins leads to an active traffic monetization campaign via hacked websites. Categories: Criminals Threat analysis Tags: ad fraud Easy WP STMP hacked malvertising plugins scams skimmer Social Warfare traffic WordPress GDPR (Read more...)	Guideline
	2019-03-25 15:46:03	A week in security (March 18 – 24) (lien direct)	A roundup of cybersecurity news from March 18–24, including Facebook's privacy pivot, password reuse, new research on hospital phishing attacks, infected iPhone apps, and more. Categories: Security world Week in security Tags: bandersnatch bec. cdc spam Business Email Compromise center for disease control and prevention cybersecurity education epic games facebook formjacking gandcrab google photos iPhone kiddle learn4life malicious app netflix network security Password reuse phishing privacy security fatigue steam vulnerabilities (Read more...)
	2019-03-22 15:00:00	Researchers go hunting for Netflix\'s Bandersnatch (lien direct)
	2019-03-21 15:00:00	Are hackers gonna hack anymore? Not if we keep reusing passwords (lien direct)	A look at the not-so-hacking hacker techniques attackers are using to compromise user accounts via weak passwords and gain access to enterprise networks. Categories: Cybercrime Hacking Tags: brute force credential stuffing enterprise enterprises hackers hacking password managers password spraying reusing passwords weak passwords (Read more...)	Hack
	2019-03-20 15:00:00	Facebook\'s history betrays its privacy pivot (lien direct)
	2019-03-19 15:00:00	New research finds hospitals are easy targets for phishing attacks (lien direct)	New research from Brigham and Women's Hospital in Boston finds hospital employees are extremely vulnerable to phishing attacks. The study highlights just how effective phishing remains as a tactic, and why awareness of email scams is more critical than ever. Categories: 101 Business Tags: anti-phishing healthcare healthcare cybersecurity hospital security hospitals phishing (Read more...)
	2019-03-18 14:57:01	A week in security (March 11 – 17) (lien direct)	A roundup of security news from March 11–17 covering our most recent blogs and other news, including Lazarus Group, Emotet, PSD2, reputation management, Google's Nest, and Firefox Send. Categories: Security world Week in security Tags: Apex Legends Chinese DNA emotet facebook Facebook outage Firefox Send Google Nest Google Play Lazarus Group netflix psd2 Spotify (Read more...)	Medical	APT 38
	2019-03-14 17:37:05	Mozilla launches Firefox Send for private file sharing (lien direct)	Mozilla recently launched Firefox Send, a new, secure way to share files from inside your browser. We discuss the pros and cons of this service. Categories: Cybercrime Privacy Tags: firefox private secure send sharing (Read more...)
	2019-03-14 16:15:05	Reputation management in the age of cyberattacks against businesses (lien direct)	A business's reputation takes years to build. With the current climate of data breaches, unsurprisingly, destroying it could only take seconds. What can businesses do to protect their brands from a fallout following a cybersecurity incident? In this post, we answer these questions and more. Categories: 101 Business FYI Tags: brm business reputation management chief marketing officer cmo global economic crime and fraud survey home depot Incident Response personally identifiable information PII privacy reputation management security breach notification laws Social Engineering Wetherspoon (Read more...)
	2019-03-14 15:00:00	Emotet revisited: pervasive threat still a danger to businesses (lien direct)	Emotet is often mentioned as one of the most annoying, effective, and costly present-day malware infections. We discuss the reasons why and the proper way to remove it. Categories: Cybercrime Malware Tags: banking Trojan botnet emotet EternalBlue information stealer Ryuk ransomware SMB vulnerabilities trickbot trojan (Read more...)	Malware Threat
	2019-03-13 16:30:02	Google\'s Nest fiasco harms user trust and invades their privacy (lien direct)	Read more...)
	2019-03-13 15:00:00	Explained: Payment Service Directive 2 (PSD2) (lien direct)	PSD2 is coming to the EU. What is it? How will it be used? What are the implications? Many questions and some answers and recommendations. Categories: Privacy Security world Tags: aisp banking cryptocurrency European Union facebook gdpr Google information PSD psd2 (Read more...)
	2019-03-12 16:27:00	The Advanced Persistent Threat files: Lazarus Group (lien direct)	Lazarus Group, the threat actors likely behind the Sony breach and WannaCry outbreak, are in the news again. Here's what you need to know about this North Korean organization, and what you should do to protect against such nation-state attacks. Categories: Criminals Threat analysis Tags: APT Lazarus North Korea (Read more...)	Threat Medical	Wannacry APT 38
	2019-03-11 15:47:02	A week in security (March 4 – 11) (lien direct)	A roundup of cybersecurity news from March 4–11, including a Chrome zero-day, Labs' data privacy report, news from RSA, and more. Categories: Security world Week in security Tags: Apple Baby Boomer Baby Boomers chrome data privacy laws dev-fuse Gen Zed Google Chrome iPhone machine learning Millennial Millennials National Security Agency NSA ransom.troldesh ransomware RSA RSA Conference shade study surveillance survey Tim Apple Tim Cook Troldesh Troldesh ransomware ultrasound ultrasound scanning US data privacy laws Verizon vulnerability week in security zero day zombie email (Read more...)
	2019-03-08 19:13:01	Google Chrome zero-day: Now is the time to update and restart your browser (lien direct)	A particularly dangerous Google Chrome zero-day is already being used in real-world attacks. Despite Google's auto update feature, users will need to close and restart their browser in order to be protected. Categories: Exploits Tags: 0day chrome exploit exploits Google vulnerability zero day (Read more...)
	2019-03-08 16:00:00	Zombie email rises from grave after eight years of radio silence (lien direct)	What do you do when an email account you assumed was long gone comes back to life after eight years? Categories: Cybercrime Privacy Tags: account email email account ISP ISPs passwords talk talk zombie email (Read more...)
	2019-03-07 16:00:00	The not-so-definitive guide to cybersecurity and data privacy laws (lien direct)	In the first blog for Malwarebytes Labs' cybersecurity and data privacy law series, we tackle US data privacy compliance from a startup's perspective. GDPR, COPPA, HIPAA-it's all here. Categories: Privacy Security world Tags: California Online Privacy Protection California Online Privacy Protection Act Childrens Online Privacy Protect Act COPPA cybersecurity cybersecurity compliance cybersecurity laws data breach data breach notification data breach notification law Data privacy data privacy compliance data privacy laws Do Not Track EU European Union gdpr General Data Protection Regulation Google Health Insurance Portability and Accessibility HIPAA legal privacy privacy policy startup (Read more...)
	2019-03-06 16:00:00	Spotlight on Troldesh ransomware, aka \'Shade\' (lien direct)	Troldesh is ransomware that relies heavily on user interaction. Nevertheless, a recent spike in detections shows it's been successful against businesses in the first few months of 2019. Categories: Malware Threat analysis Tags: decryptor decryptors ransom.troldesh ransomware ransomware remediation shade threat spotlight Troldesh (Read more...)	Ransomware
	2019-03-05 13:00:00	Labs survey finds privacy concerns, distrust of social media rampant with all age groups (lien direct)	Our survey and accompanying report find that, no matter their age, users have deep concerns about the privacy of their data online and take significant steps to secure it. Learn how public distrust in corporations' ability to protect and use data in ethically responsible ways has shaped their behavior online. Categories: Privacy Security world Tags: cambridge analytica Data privacy facebook facebook-cambridge Analytica scandal gdpr general data privacy regulations privacy search engines social media social media distrust (Read more...)
	2019-03-04 18:03:03	A week in security (February 25 – March 3) (lien direct)	A roundup of the past week's news, including mobile threats, viral scares, PDF tracking, and more. Categories: Security world Week in security Tags: exploits GPU momo PDF tracking twitter (Read more...)
	2019-03-01 16:43:03	Spectre, Google, and the Universal Read Gadget (lien direct)	A recently released paper by Google has resurrected the spirit of Spectre, a seemingly never-ending threat to most makes of processor. We take a look at what this means, and what the Universal Read Gadget means for most technology users. Categories: Cybercrime Hacking Tags: CPU exploit Google Meltdown meltdown and spectre Spectre universal read gadget vulnerability (Read more...)	Threat
	2019-02-28 16:00:00	Key considerations for building vs. buying identity access management solutions (lien direct)	Having a strong identity and access management solution is critical to the security of your organization. It ensures that the right people have access to your system-and keeps unauthorized users out. Should businesses build these solutions in-house or look to third-party vendors to fill the gap? Here are the factors to consider. Categories: 101 Business Tags: access management access management solutions development teams engineering iam identity access management risk mitigation third party (Read more...)
	2019-02-27 17:04:02	Will pay-for-privacy be the new normal? (lien direct)	As the US considers new data privacy laws, at least two new proposals include calls to exchange money for privacy-an unwelcome bargain for users. Before pay-for-privacy becomes law, privacy as a right should become industry practice. Categories: Privacy Tags: Amy Klobuchar Brian Schatz California California Consumer Privacy Act Consumer Data Protection Act Consumer Privacy Act Credo Credo Mobile DuckDuckGo duty to care facebook Federal Trade Commission Florida gdpr Google Hawaii human right Marco Rubio Minnesota oregon pay-for-privacy privacy protonmail Ron Wyden targeted ads targeted advertising twitter (Read more...)
	2019-02-26 16:00:00	New Golang brute forcer discovered amid rise in e-commerce attacks (lien direct)	E-commerce sites are a hot commodity these days. We dig into how compromised PCs are helping to hack into them to inject skimmers, whether via vulnerabilities in the websites themselves or through a new malware we discovered gaining entry via brute force. Categories: Threat analysis Tags: Bot botnet bruteforce Golang googletagmanager Magecart magento skimmer (Read more...)	Malware Hack
	2019-02-26 13:00:00	What K–12 schools need to shore up cybersecurity (lien direct)	We discuss the challenges facing K–12 schools looking to protect students' data, and which solutions they can adopt in order to build up defenses and increase cybersecurity awareness. Categories: 101 Business Tags: cybersecurity education education K–12 k–12 schools phishing phishing attacks private schools public schools ransomware schools (Read more...)
	2019-02-25 16:52:02	A week in security (February 18 – 24) (lien direct)	A roundup of security news from February 18–24 covering our most recent blogs and happenings in the world of infosec, including ATM hacking, Facebook location settings, spear phishing, and more. Categories: Security world Week in security Tags: Android atm babyshark exploit facebook winRAR (Read more...)
	2019-02-25 16:00:00	Max Schrems: lawyer, regulator, international man of privacy (lien direct)	Almost 10 years ago, privacy advocate Max Schrems and the European Union began separate efforts to change the way the world thinks about online privacy. Thanks to them, we now have GDPR. Categories: Privacy Security world Tags: Austria Brave California Consumer Privacy Act CNIL compliance Court of Justice for the European Union Data Protection Directive DPC Edward Snowden Europe v. Facebook European Charter of Fundamental Human Rights European Commission facebook gdpr GDPR fine GDPR penalty GDPR violation General Data Protection Regulation Google Information Commissioner's Office ireland Irish Data Protection Commissioner Mark Zuckerberg mass surveillance Maximilian Schrems None of Your Business noyb NSA PRISM Privacy International Safe Harbor Safe Harbor Privacy Principles Santa Clara University School of Law
	2019-02-22 17:59:01	The Advanced Persistent Threat Files: APT1 (lien direct)	Next up in the Advanced Persistent Threat Files: APT1, a unit of the People's Liberation Army of China known for wide-scale and high-volume data collection on mostly English-speaking companies. Categories: Criminals Threat analysis Tags: advanced persistent threats APT groups APT1 china Chinese malware mimikatz (Read more...)	Threat
	2019-02-21 17:00:00	The lazy person\'s guide to cybersecurity: minimum effort for maximum protection (lien direct)
	2019-02-21 16:00:00	How does macOS protect against malware? (lien direct)	Mac users often are told that “Macs don’t get viruses.” This is not really true, of course. Macs can and do get infected. However, it is true that macOS provides some basic protection against malware. This protection can be quite effective in some ways, but, unfortunately, quite ineffective in others. Let’s take a look at... Categories: 101 Mac Tags: gatekeeper mac macOS malware removal tool Malwarebytes for Mac MRT quarantine SIP TCC XProtect (Read more...)
	2019-02-20 19:21:04	Sophisticated phishing: a roundup of noteworthy campaigns (lien direct)	A phishing page that hides behind a translation service. A kit that uses fake font files. A hyper-realistic campaign that could likely fool even the pros. We look at these noteworthy phishing attempts and more to show how far phishers have evolved, and remind users to remain vigilant against this threat. Categories: Cybercrime Social engineering Tags: font file phishing google translate phishing phishing phishing kit phishing template (Read more...)
	2019-02-20 16:00:00	Good bots, bad bots: friend or foe? (lien direct)	Bots are an endless source of debate online, but all we ever hear about are the bad ones. In this post, we look at some examples you've probably already run into, and explain why one person's good bot is another organization's bad one. Categories: 101 Business Tags: ad fraud AI bad bots bidding bot bots chat bots mindless bots snipers (Read more...)
	2019-02-18 16:30:02	A week in security (February 11 – 17) (lien direct)	A roundup of security news from February 11-17 covering sextortion, Facebook phishing, Emotet, exploit kits, whole team security, anti-phishing plan, and lots more. Categories: Security world Week in security Tags: anti-phishing-plan bank of valetta emotet exploit kits sextortion sgx VFEmail whole team security wordpress plugin (Read more...)

Last update at: 2024-04-26 15:08:00
See our sources.

To see everything: Our RSS (filtrered)